CVE-2025-59180 — Use of Hard-coded Credentials Vulnerability

CVE-2025-59180

Use of Hard-coded Credentials Vulnerability PUBLISHED

Description (CNA)

Ericsson Packet Core Controller (PCC) versions prior to 1.38 contain a hardcoded credential vulnerability in the alarm system. An attacker with access to the cluster with knowledge of the hardcoded credential can read alarm and alert information.

Affected (CNA)

Vendor / product	Versions
Ericsson / Packet Core Controller (PCC)	affected 0 before 1.38

CWE

CWE-798

References

https://www.ericsson.com/en/about-us/security/psirt/security-bulletin-pcc-july-2026

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.